Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

hgiga / msr45_isherlock-base CVEs

Beta · best-effort

3 CVEs tagged to hgiga / msr45_isherlock-base — 1 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to hgiga vendor archive

CVE-2020-25848

Published Dec 31, 2020

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2019-9883

Published Jun 3, 2019

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cf_new.cgi?chief=&wk_group=fu…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2019-9882

Published Jun 3, 2019

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via user/save_list.php?ACSION=&type=em…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1